Risk, Compliance & Information Security Executive

Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes while analyzing security vulnerabilities to propose effective technical and organizational controls. Plan and coordinate internal and external penetration tests, perform regular vulnerability assessments using tools such as Nessus and Qualys, and conduct risk assessments to prepare corrective action plans. Use SIEM and GRC tools for monitoring and reporting, prepare for audits by managing relevant documentation, and raise awareness across the organization on compliance and security best practices. This hybrid role at Ticimax supports secure software products in the e-commerce landscape.